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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1. (Currently Amended) A method of sending streamed data over an IP 
network from a first node to a second node, the method comprising: 

using a first protocol to establish a first security association (SA1) between the 
first and second nodes; 

using the f i rst pro toco l to estatetish-a first security association (SA1) to establish a 
second security association (SA2) over a second protocol between the first and second 
nodes; 

modifying the second security association (SA2) by using only selected 
components of the second protocol for providing encryption at the first node of the 
streamed data between the first and second nodes; 

constructing datagrams containing segments of the encrypted streamed data in 
the datagram payload, the datagrams including a reduced overhead corresponding to 
the selected components; and 

sending the datagrams from the first node to the second node. 

2. (Previously Presented) A method according to claim 1, wherein said 
streamed data is VoIP data or videoconferencing data, wherein said streamed data 
packets do not include IPSec headers, authentication headers (AH) and encapsulation 
security payload (ESP) headers. 

3. (Previously Presented) A method according to claim 1, wherein said 
first and second nodes are end points for the data. 

4. (Previously Presented) A method according to claim 1, wherein said 
first and second nodes tunnel data between respective end points. 
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5. (Currently Amended) An apparatus for sending streamed data over 
an IP network from a first node to a second node, the apparatus comprising: 

processing means and memory containing software instructions for implementing 
IPSec protocols; 

means for using a first protocol to establish a first security association (SA1) 
between the first and second nodes; 

means for using the first protocol to establish-a first security association (SA1) to 
establish a second security association (SA2) over a second protocol between the first 
and second nodes; 

means for modifying the second security association (SA2) by using only 
selected components of the second protocol for providing encryption at the first forst 
node of the streamed data between the first and second nodes; 

means for constructing datagrams containing segments of the encrypted 
streamed data in the datagram payioad, the datagrams including a reduced overhead 
corresponding to the selected components; and 

means for sending the datagrams from the first node to the second node. 

6. (Original) Apparatus according to claim 5, the apparatus being an end 
user terminal such as a telephone, communicator, PDA or palmtop computer or a 
personal computer (PC). 

7. (Previously Presented) Apparatus according to claim 6, the apparatus 
being a firewall or gateway coupled to the first node, which is the source of the 
streamed data, wherein the streamed data packets do not include IPSec headers, 
authentication headers (AH) and encapsulation security payioad (ESP) headers. 
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